
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
File: oWsNirSUNlULar9Ft5A1rsav8jw.mft (raw, json)
Hash identifier: DbqUrwRbB+ugTvmtKM8qe2yyWcPW0MOF9v6zyFSnIzw=
Subject key identifier: 7B:A8:9F:82:5E:C4:73:31:FD:1A:B5:C8:B3:2F:D9:37:58:32:13:68
Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Certificate issuer: /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Certificate serial: 019873E26A3A82D3E04EF6D3D77FE59C1D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
Manifest number: 161E
Signing time: Mon 04 Aug 2025 07:01:14 +0000
Manifest this update: Mon 04 Aug 2025 07:01:14 +0000
Manifest next update: Tue 05 Aug 2025 07:01:14 +0000
Files and hashes: 1: G7lrDh3ng-GW-cZtTDXP_4Uyeeo.roa (hash: 8XSDBL+Th3lG4+DHiWnSkzinVN6T0SXBXCnACUJdD3Y=)
2: GelQ-wpEtVaOdgayfz6S6TVZ0zQ.roa (hash: /97Q6YMRjpTXM1yiFxK+BKHm6SI3QfLA+ZDxZJQchX4=)
3: QkvmRVh9vbjetaUTQDKmilh3yjI.roa (hash: QQUY9iioyezmP/+TplWuIp1XntdAN5iG4imSGslQuKQ=)
4: oWsNirSUNlULar9Ft5A1rsav8jw.crl (hash: njt9Y9zEZTv+4+fUaN3ScgaIXylYxnmITvZO1Xvn2Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:6a:3a:82:d3:e0:4e:f6:d3:d7:7f:e5:9c:1d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Validity
Not Before: Aug 4 07:01:14 2025 GMT
Not After : Aug 5 07:01:14 2025 GMT
Subject: CN=7ba89f825ec47331fd1ab5c8b32fd93758321368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1a:51:6c:58:bc:4f:15:92:79:38:4f:85:fa:
a8:2c:4b:e9:29:da:1b:2b:ff:9e:bf:b1:b4:cf:62:
f7:47:ae:05:72:ae:f9:e1:60:20:8e:a4:1c:66:42:
71:41:cc:2f:71:85:08:0d:8b:c2:dd:84:01:fe:fc:
80:7c:13:0b:2b:db:fc:59:ec:12:b7:7b:7b:17:d2:
b6:38:40:1d:19:2c:3c:29:27:74:36:f5:a5:87:ee:
b4:cf:b4:64:77:25:a3:d8:ef:79:ad:69:14:a0:7e:
46:52:0d:1e:3f:34:01:4d:a1:31:01:f1:88:30:04:
3d:c5:16:cd:a7:41:12:f7:bf:e3:e9:38:3e:71:bd:
75:97:04:b8:d6:cd:39:14:e4:92:35:80:13:c6:b6:
87:f3:a6:cf:8c:a4:76:86:d2:7c:26:ab:ed:47:b8:
14:64:e8:27:fc:74:58:52:6f:da:8e:aa:87:1d:53:
46:2a:00:d7:03:d1:56:4c:e3:a8:1a:bd:0a:f6:09:
9a:8c:91:88:c5:3e:6b:1e:74:d0:a3:ba:67:32:a8:
9d:bf:06:b7:52:5d:f2:64:a3:22:ea:1b:fb:d3:a8:
e8:98:02:fa:7e:b8:4d:a7:49:f9:e5:db:93:67:1c:
4f:8d:a6:63:52:3a:ff:96:f8:99:89:0c:d1:71:b4:
f2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A8:9F:82:5E:C4:73:31:FD:1A:B5:C8:B3:2F:D9:37:58:32:13:68
X509v3 Authority Key Identifier:
keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d0:8b:bc:6e:02:d5:85:51:d0:dd:00:b3:ca:0d:05:20:ca:
53:02:c5:e5:4f:fb:ad:5d:ed:29:0d:04:3d:66:f0:1c:32:81:
fd:24:e4:b4:f7:41:b1:7c:e5:42:f7:4e:1f:15:7c:09:0a:fa:
e5:ab:9d:ce:27:e7:e1:71:76:c9:5c:98:34:32:e5:c5:0e:7f:
ce:0b:01:ac:ef:60:b0:cd:b8:0d:1c:df:d8:78:4e:19:bb:47:
2f:13:1a:ae:52:03:5b:47:ad:56:16:56:eb:03:38:ca:d7:ab:
51:72:21:8b:be:97:12:78:a4:ef:50:bf:43:dd:b5:49:44:5d:
4f:95:b1:ff:12:20:3f:78:b3:23:7f:2d:f3:65:2d:08:cf:ac:
d2:db:a0:07:54:a0:23:ff:1b:20:f3:8a:28:29:06:e4:9c:3f:
50:35:ed:2b:9b:cd:b3:ea:7e:9a:5a:1e:9e:97:96:a5:df:ef:
42:fd:09:c0:d3:be:fb:1b:4b:84:44:a1:94:34:f4:f7:22:63:
f4:5e:e3:e7:49:93:d7:14:03:fd:73:cc:62:2c:d6:68:03:ef:
e4:97:37:8d:28:15:40:0c:a8:9c:8e:1b:e3:45:22:e5:79:1c:
c0:8e:5d:71:0f:c3:f8:98:74:a8:6a:43:8c:9e:21:ea:e7:9e:
ee:14:5a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:57 2025 by rpki-client